Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39392e302f32342d3234203d3e203439393939.roa
File:                     36372e3231302e39392e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          qvZSGdnc87DUgElf/yiEvwVa1akCUFIsoXjEwjxRQwc=
Subject key identifier:   40:B5:AD:EE:E0:87:01:F2:C4:B6:1D:63:FE:D4:89:A1:65:3F:A1:6A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4673DBC1EC50607D89D7C05FE343C74F1ED5B606
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39392e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 07 Dec 2022 22:16:18 +0000
ROA not before:           Wed 07 Dec 2022 22:11:18 +0000
ROA not after:            Wed 06 Dec 2023 22:16:18 +0000
asID:                     49999
IP address blocks:        67.210.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:73:db:c1:ec:50:60:7d:89:d7:c0:5f:e3:43:c7:4f:1e:d5:b6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec  7 22:11:18 2022 GMT
            Not After : Dec  6 22:16:18 2023 GMT
        Subject: CN=40B5ADEEE08701F2C4B61D63FED489A1653FA16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:89:ce:81:65:35:90:b1:e9:71:b8:34:76:
                    40:81:fa:59:e1:6b:98:37:ea:f7:ea:b7:b1:7a:ca:
                    e7:29:fc:b7:da:d4:b7:0a:bd:10:fb:a9:02:53:44:
                    a1:ed:81:2b:81:ed:a9:3d:73:fe:ce:b1:1b:2e:87:
                    d7:7e:59:14:26:06:4b:33:3d:00:da:26:c0:80:93:
                    ea:ef:70:26:bf:44:0f:c2:15:bc:b6:8c:e0:79:d9:
                    d9:99:5e:5f:8a:8e:99:80:7b:3c:62:49:34:25:36:
                    05:ae:df:ff:1f:a0:e9:c5:7e:92:8e:00:e0:04:35:
                    cf:a3:83:68:2a:5e:63:a5:37:5a:58:5f:f8:37:97:
                    62:cb:82:05:f7:62:34:bf:68:07:09:6b:58:86:61:
                    30:1a:4c:39:a3:6a:f6:66:ca:3d:c5:08:b2:d4:c6:
                    52:01:6a:df:7e:3f:dc:be:b1:f7:ad:4b:59:9e:85:
                    d6:b9:ff:c7:d1:0f:75:5f:d3:e5:b0:3b:4e:bf:c2:
                    53:8b:8e:88:84:e6:5a:0c:bc:eb:e5:50:11:a4:05:
                    c7:4c:08:8d:4d:04:d1:3b:b0:3b:79:3f:07:c2:64:
                    b4:68:d9:d5:5c:cc:4d:6b:2b:8f:96:7e:9a:62:5d:
                    97:69:f0:fb:fa:f0:9f:21:e7:4c:33:93:14:25:cf:
                    39:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:AD:EE:E0:87:01:F2:C4:B6:1D:63:FE:D4:89:A1:65:3F:A1:6A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e39392e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:95:90:17:37:e3:3e:be:61:84:77:d7:4f:31:93:0f:d7:a6:
         a8:e5:c1:62:c9:cb:ab:85:03:93:72:2f:7a:00:cc:5b:fb:3e:
         53:6d:20:e7:5e:50:2b:a1:e0:c3:e3:a9:92:2e:58:fe:e7:f1:
         3f:b3:9f:9e:f0:15:ad:3b:61:04:a4:52:84:b7:b0:7e:0a:2c:
         25:b4:66:ba:0f:77:b8:af:49:d4:7c:6a:9b:a6:39:e3:ef:4c:
         c9:92:96:82:7d:19:20:77:95:29:93:7e:59:39:c3:13:aa:5a:
         40:13:26:bd:de:0b:e3:d2:50:20:65:4d:f2:e2:c1:3c:f0:3c:
         5f:3b:75:fa:6c:db:cb:e9:cc:8a:d5:71:7f:e7:4e:89:3f:8e:
         89:c5:43:d7:c4:c1:ec:c4:96:dc:c8:46:f6:6d:d7:2c:f0:ae:
         fb:ed:81:34:b8:db:83:1a:94:fb:9d:10:db:3e:76:13:8f:d2:
         32:2f:28:c8:02:88:f5:14:02:81:b1:48:69:a1:0f:3d:3f:0e:
         db:37:f8:25:9a:af:d0:09:51:f0:01:c8:22:89:46:9d:5a:52:
         f8:94:82:4f:12:e1:7a:5a:44:f9:d5:f9:e5:72:9c:65:a8:d4:
         e9:9e:bd:e0:d4:f3:c8:b9:f5:76:3d:c8:18:e5:7e:64:a9:88:
         a5:f0:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----